$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa File: da636e8c-4d89-3b3b-971d-d9b212de0db2.roa (raw, json) Hash identifier: 1d1jylSfNeC/C3eNQzRuwipvU8LF8lt2Lce/F+yp19I= Subject key identifier: 82:25:3C:29:F7:E8:F2:AA:65:22:57:19:7F:EA:AF:66:AE:79:02:19 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AADF10C60719EBEA2A34A3818 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 173.199.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0c:60:71:9e:be:a2:a3:4a:38:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=04b8d66d-053e-42ed-998a-4cff1c647cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:ed:78:59:d5:6c:5a:0c:7a:78:46:b7:67: ee:8f:af:80:32:83:3f:fd:d8:39:6e:ba:a4:75:e4: 5a:63:b6:b6:53:54:b4:05:85:89:e6:3e:67:28:76: f7:77:f9:cd:e4:9e:3f:f2:6f:9f:93:89:4e:87:c9: df:a7:a1:37:8e:42:c1:fa:3a:6b:33:09:98:2a:b3: 80:a8:3f:22:81:8e:c3:1f:89:23:80:44:5c:74:85: 67:32:fa:e3:b2:c6:66:0b:ce:7e:2a:65:a0:2a:13: 31:18:f4:2b:fd:79:3c:df:06:6c:76:59:f1:86:97: 75:7e:74:fe:a8:65:b6:9a:4e:bd:3c:4a:e8:87:67: a1:10:94:99:55:e8:8d:51:33:04:b4:f8:3c:9f:d3: 02:28:df:92:2e:01:5b:6f:62:86:57:93:c2:1d:ca: d1:e8:6a:4d:77:6c:8b:2c:21:dd:94:89:e5:a6:d9: 81:90:92:4a:93:22:21:32:1a:65:f5:69:c7:1c:2c: 59:e4:a1:fb:82:74:63:a7:dd:7d:dd:28:aa:cb:52: 2d:63:09:3f:81:42:70:3c:e4:81:9a:35:84:ee:0f: cc:f1:99:c3:26:0c:fa:71:94:06:11:e6:63:17:a6: 1d:e1:ea:ae:de:cd:18:e4:f7:54:65:b6:70:c3:ae: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:25:3C:29:F7:E8:F2:AA:65:22:57:19:7F:EA:AF:66:AE:79:02:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:57:30:4c:56:dd:cf:d6:73:83:4f:06:a5:f8:0c:1b:b6:9c: 6e:cc:6b:29:4a:0f:a4:e2:a7:4e:cf:7e:ee:44:ad:ea:7c:36: 69:78:67:79:ce:69:1d:9c:1e:b0:cf:45:29:5d:8e:a9:28:78: 79:c4:33:42:21:31:b8:cd:93:16:28:b4:f6:37:1c:43:7d:e5: 99:ff:e9:97:52:c2:1a:23:55:45:95:a3:4a:2c:4e:bd:33:9b: 1c:86:7c:a7:ad:ac:ab:08:44:ad:8f:28:78:5c:d5:7a:3e:d6: 57:76:43:f5:70:9a:68:2c:b7:b7:74:56:c0:2e:2a:6a:38:35: 3a:1f:17:04:ab:34:6b:4a:b8:66:14:d8:fb:3f:0b:04:7e:0a: ac:99:41:f2:33:44:7f:65:f4:c9:25:d0:57:cc:de:e5:a5:00: 35:24:b6:a3:9a:fc:31:2d:08:ea:3f:a2:a9:16:0b:2f:f0:7b: 2d:b2:b2:22:24:12:c9:bc:61:9d:b0:e1:30:da:70:7a:63:6b: 9d:67:38:2b:9e:6d:40:df:4a:fa:3f:4d:ea:7e:0e:67:b3:61: 8a:3b:69:fb:d4:80:91:40:3b:0a:22:52:77:53:4d:f8:c0:98: a2:05:8d:4c:4b:d5:6d:70:df:ed:67:e7:79:19:6b:b5:71:dc: ed:50:2e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QxgcZ6+oqNKOBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MDRiOGQ2NmQtMDUzZS00MmVkLTk5OGEtNGNmZjFjNjQ3Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXDteFnVbFoMenhGt2fuj6+AMoM//dg5brqk deRaY7a2U1S0BYWJ5j5nKHb3d/nN5J4/8m+fk4lOh8nfp6E3jkLB+jprMwmYKrOA qD8igY7DH4kjgERcdIVnMvrjssZmC85+KmWgKhMxGPQr/Xk83wZsdlnxhpd1fnT+ qGW2mk69PEroh2ehEJSZVeiNUTMEtPg8n9MCKN+SLgFbb2KGV5PCHcrR6GpNd2yL LCHdlInlptmBkJJKkyIhMhpl9WnHHCxZ5KH7gnRjp9193Siqy1ItYwk/gUJwPOSB mjWE7g/M8ZnDJgz6cZQGEeZjF6Yd4equ3s0Y5PdUZbZww65/rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIlPCn36PKqZSJXGX/qr2aueQIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGE2MzZlOGMtNGQ4OS0z YjNiLTk3MWQtZDliMjEyZGUwZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhXMExW3c/Wc4NPBqX4DBu2nG7MaylKD6Tip07Pfu5Erep8Nml4Z3nO aR2cHrDPRSldjqkoeHnEM0IhMbjNkxYotPY3HEN95Zn/6ZdSwhojVUWVo0osTr0z mxyGfKetrKsIRK2PKHhc1Xo+1ld2Q/Vwmmgst7d0VsAuKmo4NTofFwSrNGtKuGYU 2Ps/CwR+CqyZQfIzRH9l9Mkl0FfM3uWlADUktqOa/DEtCOo/oqkWCy/wey2ysiIk Esm8YZ2w4TDacHpja51nOCuebUDfSvo/Tep+DmezYYo7afvUgJFAOwoiUndTTfjA mKIFjUxL1W1w3+1n53kZa7Vx3O1QLsA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:19 2025 by rpki-client